[asterisk-dev] Asterisk 11.9.0 Segmentation fault.

Tue Oct 21 02:17:03 CDT 2014

Hi,

My Asetrisk restarted after to output following warning message.

     [Oct 16 15:59:58] WARNING[17102][C-00008e34]: chan_sip.c:4696
update_provisional_keepalive: Unable to cancel schedule ID 738278.  This is
probably a bug (chan_sip.c: update_provisional_keepalive, line 4696).

This message has been output after a timeout occurrs in the Dial()
application.
Then, the Hangup() application is run, and Asterisk is restarted as
following.

=========== output of asterisk -rvvvv ===========

   -- Executing [67034 at local:3] Dial("SIP/Other-0000b6ad", "SIP/67034, 60")
in new stack
   == Using SIP RTP CoS mark 5
   -- Called SIP/67034
   -- SIP/67034-0000b6b2 is ringing

   <<<<<<<<  waiting 60 secouns >>>>>>>

   -- SIP/67034-0000b6b2 is ringing
   -- Nobody picked up in 60000 ms
   -- Executing [67034 at local:4] Ringing("SIP/Other-0000b6ad", "") in new
stack
   [Oct 16 15:59:58] WARNING[17102][C-00008e34]: chan_sip.c:4696
update_provisional_keepalive: Unable to cancel schedule ID 738278.  This is
probably a bug (chan_sip.c: update_provisional_keepalive, line 4696).
   -- Executing [67034 at local:5] Goto("SIP/Other-0000b6ad", "error") in new
stack
   -- Goto (local,67034,102)
   -- Executing [67034 at local:102] Busy("SIP/Other-0000b6ad", "3") in new
stack
   == Spawn extension (local, 67034, 102) exited non-zero on
'SIP/Other-0000b6ad'
   -- Executing [h at local:1] Hangup("SIP/Other-0000b6ad", "") in new stack
   == Spawn extension (local, h, 1) exited non-zero on 'SIP/Other-0000b6ad'

  <<<<<<<<< Asterisk chrash and restart >>>>>>>>>

=================================================

I have installed Asterisk-11.9.0 a two month ago.  Asterisk have be running
without restart for two month.
However, in this week, Asterisk has restarted three times.
In that time, an above message is appear always.

I am trying to reproduce with intention of this problem, but not able to
reproduce yet.

Could anybody tell me a cause or workaround of this problem?

The result of "bt full" for the core file is this.
(gdb) bt full
#0  0x0000003e94230265 in raise () from /lib64/libc.so.6
No symbol table info available.
#1  0x00002aaab22946b2 in skgesigOSCrash () from
/usr/local/lib/libclntsh.so.11.1
No symbol table info available.
#2  0x00002aaab2532705 in kpeDbgSignalHandler () from
/usr/local/lib/libclntsh.so.11.1
No symbol table info available.
#3  0x00002aaab22948c2 in skgesig_sigactionHandler () from
/usr/local/lib/libclntsh.so.11.1
No symbol table info available.
#4  <signal handler called>
No symbol table info available.
#5  0x00002aaaceab8af1 in stop_session_timer (p=0x2aab18b892d8) at
chan_sip.c:29206
__PRETTY_FUNCTION__ = "stop_session_timer"
#6  0x00002aaaceac23f1 in dialog_unlink_all (dialog=0x2aab18b892d8) at
chan_sip.c:3462
cp = (struct sip_pkt *) 0x0
owner = <value optimized out>
__PRETTY_FUNCTION__ = "dialog_unlink_all"
#7  0x00002aaaceac2f5a in dialog_needdestroy (dialogobj=<value optimized
out>, arg=<value optimized out>, flags=<value optimized out>)
    at chan_sip.c:19564
dialog = (struct sip_pvt *) 0x2aab18b892d8
__PRETTY_FUNCTION__ = "dialog_needdestroy"
#8  0x000000000044736e in internal_ao2_callback (c=0x1346c4c8, flags=6,
cb_fn=0x2aaaceac2d70, arg=0x0, data=0x0, type=DEFAULT, tag=0x0,
    file=0x0, line=0, func=0x0) at astobj2.c:1102
match = -827576976
__list_head = (struct bucket *) 0x1346c4e8
__list_next = (struct bucket_entry *) 0x0
__list_prev = (struct bucket_entry *) 0x0
__list_current = <value optimized out>
cur = (struct bucket_entry *) 0x2aab1c912ad0
i = <value optimized out>
start = 0
last = 1
orig_lock = AO2_LOCK_REQ_MUTEX
ret = (void *) 0x0
cb_default = (ao2_callback_fn *) 0x2aaaceac2d70 <dialog_needdestroy>
cb_withdata = (ao2_callback_data_fn *) 0
multi_container = (struct ao2_container *) 0x0
multi_iterator = (struct ao2_iterator *) 0x0
__PRETTY_FUNCTION__ = "internal_ao2_callback"
#9  0x0000000000447a11 in __ao2_callback (c=0x2aab18000000,
flags=OBJ_UNLINK, cb_fn=0, arg=0x0) at astobj2.c:1207
No locals.
#10 0x00002aaaceb26069 in do_monitor (data=<value optimized out>) at
chan_sip.c:29102
res = <value optimized out>
t = 1413442798
reloading = 0
__PRETTY_FUNCTION__ = "do_monitor"
---Type <return> to continue, or q <return> to quit---
#11 0x000000000056a03c in dummy_start (data=<value optimized out>) at
utils.c:1162
__cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {46912524978576,
-6422456248918885333, 0, 1106210816, 0, 4096,
        -6422456247867614133, -6422456248915649527}, __mask_was_saved =
0}}, __pad = {0x41ef61a0, 0x0, 0x0, 0x0}}
__cancel_arg = (void *) 0x41ef6940
not_first_call = <value optimized out>
ret = <value optimized out>
#12 0x0000003e94e064a7 in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#13 0x0000003e942d3c2d in clone () from /lib64/libc.so.6
No symbol table info available.
(gdb)

Best Regards
Yoshi.Tame
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-dev/attachments/20141021/e5f3748e/attachment.html>